Project

General

Profile

Bug #8214

HOME_NET includes all locally attached Networks

Added by Julian Wecke almost 2 years ago. Updated almost 2 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Suricata
Target version:
-
Start date:
12/16/2017
Due date:
% Done:

0%

Estimated time:
Affected Version:
Affected Architecture:

Description

When selecting a passlist to define the HOME_NET the HOME_NET always contains the locally attached networks of all interfaces(except wan). Even if the Local Networks Add firewall Locally-Attached Networks to the list (excluding WAN). option is not checked in the passlist configuration. This is different as the expected behavior.

In a scenario where your want to protect a local network from other local networks you might consider only the network from the interface suricata is running on as HOME_NET and everything else EXTERNAL.

History

#1 Updated by Bill Meeks almost 2 years ago

This bug has been resoved in version 4.0.3 of the Suricata package which was moved to release January 12, 2018.

Bill

#2 Updated by Renato Botelho almost 2 years ago

  • Status changed from New to Resolved

Also available in: Atom PDF